Data Subject Rights

Depending on your jurisdiction and the relationship under which Phiusion processes your personal information, you may exercise one or more of the rights described below. To exercise any of them, contact our Privacy Officer at privacy@phiusionlabs.app. We respond within 30 days.

Patients in the United States

• HIPAA Right of Access (§164.524): obtain a copy of your medical records held by your practitioner. Phiusion supports your practitioner in fulfilling this within HIPAA timelines.
• State consumer-health laws (WA, CT, CO, NV, OR, MD): depending on your state of residence, additional rights may apply. Contact us to exercise them.
• BIPA / TX CUBI / WA RCW 19.375 (if applicable to your encounter location): biometric identifier rights including notice and destruction.

Patients in Canada

• PIPEDA + Quebec Law 25 + Ontario PHIPA: access, correction, and (where applicable) erasure of personal health information.
• Quebec residents have additional rights under Law 25 including portability and objection to automated decisions.

Practitioners using Phiusion

• Access, correction, deletion of your account and practice data.
• Right to a copy of all data we hold on you in a portable format.
• Right to lodge a complaint with your local supervisory authority.

How we respond

1. Email privacy@phiusionlabs.app describing your request.
2. We verify your identity (typically via the email on file).
3. For patient requests, we coordinate with your practitioner (who is the controller of your clinical records).
4. We respond within 30 days. For complex requests we may extend by an additional 30 days with notice.

This page is a landing-page summary. Full DSAR mechanics and jurisdiction-specific procedures are published as part of Phase 4 (data-subject-rights operations).